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A method and apparatus for an adapter card, for use in a 
computer, to provide conditional access by the computer to 
incoming data streams while maintaining the security of 
information by maintaining a listing of addresses corre- 
sponding to data streams which the computer is authorized 
to receive, receiving and determining the address of a frame, 
determining whether the frame address matches an address 
maintained in an Access Table, and processing and trans- 
mitting only those frames of data streams which the com- 
puter is authorized to receive. 
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METHOD AND APPARATUS FOR SUMMARY OF THE INVENTION 

CONNECTING COMPUTER TO SATELLITE lll6 p re s en , invention addresses the shortcomings of prior 

art systems by teaching a secure satellite communication 

RELATED APPLICATIONS 5 svstem f° r providing subscribers with conditional access to 

broadcast satellite data through their computers. This system 

This application is a division of application Sen No. maintains the security of information by providing access 

08/862,346 filed May 23, 1997, U.S. Pat. No. 6,125,184 only to aut horized users, and provides an additional benefit 

which is a division of application Ser. No. 08/557,398 filed by enabling users to concurrently receive and decrypt mul- 

Nov. 13, 1995, U.S. Pal. No. 5,652,795, which is a liple dala streams . 

continuation-in-part of application Ser. No. 08/340,347 filed 10 . - , . ,. . . 4 . . 

+ * . j In a preferred embodiment, the present invention teaches 

Nov. 14, 1994, now abandoned. r , c . . \ c . . 

* a method for an adapter card, for use in a computer, to 

FIELD OF THE INVENTION provide conditional access by the computer to input data, 

including data streams transmitted via satellite, wherein a 

The present mvention relates generally to the field of data stfeam fe comprised of at least one frame and each 

communications, and more specifically to conditional access frame includes aD address identifying the data stream. This 

by computers to data streams transmitted via satellite. method includes the steps of maintaining an Access Table, in 

BACKGROUND OF THE INVENTION which each table entry includes an address field for storing 

an address corresponding to a data stream which the corn- 
Satellite communication has long been used to broadcast 2Q puter ^ authorized to receive, receiving a frame and deter- 
data to computers. In situations requiring the same data to be mining its address, and determining whether the frame 
transmitted to multiple sites, satellite communication, which address matches an address maintained in the Access Table 
allows a single transmission of data to be received at in order to determine whether the computer has access to the 
multiple sites, can be more cost effective than terrestrial data strea m corresponding to the frame. If a match is not 
communication, which requires separate transmission to ^ f ound) tne adapter card discards the frame, but if a match is 
each site. found, the adapter card processes and transmits the frame to 

In the past, data broadcast via satellite to a computer the computer through a bus interface, 

typically was received by an external satellite receiver, In a p re ferred embodiment, the adapter card additionally 

which serially passed a single data stream to the computer ^ capab i e of processing data transmitted from the computer, 

through a serial adapter interface. An example of such a , n t 4 tI _ tl _ , , , , 

. , ~ . . tx t-m ^» j . 30 I" addition to the method described above, the present 

system is the Opportunistic Data File Broadcast system j- » j . j , _jr • 

/ . , , tt . vr 10 , • . . invention is also directed to an adapter card for use in a 

developed by Hughes Network Systems, which employs a c . ,. ,. . , ... 

~ . r . c* . o .11-. \ computer, for providmg conditional access by the computer 

Compression Labs Spectrum Saver satellite receiver to pass , * ♦ j * • 1 j * <• „ * j * ♦ _L ♦ a 

n( , JL- . 1 « . . * « « . 4 r 4 to mput data including frames of data streams transmitted 

RS-422 serial data to high-speed adapters in computers at • . i_ • i_ j , • • j c * 

„ . - , , , j 1 via satellite, wherein each data stream is comprised of at 

remote sites. This particular system has been used by 1C , c , , c . , « ,j . , t . 

c. . . . . 4 . \ , . /- ■ 1 j 4 c . 1 35 least one frame and each frame includes an address ldenti- 

financial institutions to broadcast financial data from central r • *i_ j . . ^ j * j ■ 1 j 

A , , a- fyine the data stream. The adapter card includes a receiver 

data centers to branch onices. / Jl4 c A ^ ui , 

for receivmg a data stream frame, an Access Table, in which 

For commercial data broadcasts, conditional access tech- each table entry mcludes an address field for storing an 

nology enabling only authorized users to access the broad- addfess corresponding to a data stream which the computer 

cast data is essential to ensure payment for the data. Con- 40 ^ authorized to receive, an integrated filtericrypto (IFC) 

ditional access is typically implemented by encrypting the bbck fof determining an addreS s of the received frame and 

broadcast data and providmg the decryption keys only to determining whether lhe frame address matches an address 

authorized receivers. In prior satellite data communication maintained in the Access Table, and a bus interface for 

systems, such as the Opportunistic Data File Broadcast enabling communication betwee n the adapter card and the 

system, conditional access functions have been performed 45 computer. If me IFC finds that the frame address does not 

by the external satellite receiver, which outputs a single match a uble address> the IFC block discards the framCj but 

decrypted data stream to the receivmg computer. In these if it finds a match> me IFC block processes the frame mt0 

systems, conditional access is provided for only a single data output data> tQ be transmitted t0 the computer via the bus 

stream. Thus, to access multiple data streams simultaneously mter f aC e. The IFC preferably is also capable of processing 

transmitted would require users to have a complete set of 50 data mput from the compu ter into output data, 

receiving equipment for each data stream. ™ . . , .1*. .. _. 

. - . , The mvention itself, together with further objects and 

Another type of satellite communication system has been 4 . , t , , .„ ? . . , , , , c 

, / r , . , , , • , « • attendant advantages, will best be understood by reference 

suggested in which an adapter card, insertable mto a #A f n • 5 , ., A Aa * # . inU - ' • 

&fe . , „. r . . ' , , - . to the following detailed descnption taken in conjunction 

computer, enables satellite reception without the need for the ... 4 . 0 . . . 

^ , ' „. . ,-1 c L . Wltn the accompanying drawmgs. 

external satelhte receiver. Examples of such systems are 55 

disclosed in U.S. Pat. No. 4,777,657 to Gillaspie, U.S. Pat. BRIEF DESCRIPTION OF THE DRAWINGS 
No. 5,019,910 to Filmer, and U.S. Pat. No. 5,359,367 to 

Stockill FIG. 1 is an illustration of one form of satelhte broadcast 

However, these references fail to teach a system incor- s y slem in which the P resent ^ntion may be implemented, 

porating conditional access technology, and similarly fail to 60 FIG - 2 ^ a block diagram of the preferred embodiment of 

provide for simultaneous receipt of multiple data streams me adapter card receiver of the present invention, 
where the data streams are individually conditional access 
controlled. Furthermore, to the extent that the prior art 
discloses use of decryption hardware, none of the prior art 

systems extends the use of the hardware beyond decrypting 65 It is envisioned that the present invention will be used in 

an incoming broadcast data stream to providing encryption conjunction with a satellite broadcast system such as that 

and decryption operations for the connected computer. shown in FIG. 1. As illustrated, this system includes a 



DETAILED DESCRIPTION OF THE 
INVENTION 
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network operations center (NOC) 10, satellites 20, antenna 
receivers 30, adapter card receivers 40 (adapter cards), and 
computers 50. 

In this system, a subscriber, through an adapter card 40 
inserted in a computer 50, receives information in data 5 
streams broadcast via satellite 20. The data streams are 
uplinked to one or more communications satellites 20 by the 
NOC 10 from a large antenna broadcast earth station. Each 
data stream is broadcast in units of frames, with each frame 
including an address header for identifying the data stream, 10 
a data field containing data, and a CRC tail for ensuring 
accurate transmission. Preferably, the frames are encrypted, 
and the key needed to decrypt the data of a frame is 
identified by its address header. Accordingly, data can be 
accessed only by receivers having the proper key. 35 

Each antenna receiver 30, comprising a smaller antenna 
and low-noise block (LNB) element, receives the broadcast 
frames and transmits the frames to a connected adapter card 
40 inserted in the subscriber's computer 50. Because the 
subscriber may have access to only a subset of the broadcast 20 
data streams, the adapter card 40 screens incoming frames, 
and processes only those frames the subscriber is authorized 
to receive by using the frame address field to retrieve the 
corresponding key for decrypting each frame. The adapter 
card 40 then transmits the decrypted frames through a bus 25 
interface to the computer 50. 

The present invention is directed to the adapter card 40, 
which provides the conditional access to incoming data 
streams, and preferably enables concurrent reception of 3Q 
multiple data streams. By processing only authorized frames 
and discarding all others, the present invention prevents 
unauthorized frames from ever being passed to the computer 
50. This not only prevents subscribers from illicitly access- 
ing the decrypted data stream, but also provides a physical 35 
measure of security by preventing the encrypted data stream 
from being made available to be downloaded into the 
computer 50. This is an important feature because security 
mechanisms have been evaded by downloading encrypted 
data, as once the encrypted data stream is stored in the ^ 
computer memory, the user can access the data for as many 
attempts as needed for decryption. 

By evaluating and decrypting incoming data streams on a 
frame-by-frame basis, the present invention enables simul- 
taneous reception of multiple conditional access controlled 45 
data streams statistically multiplexed in a received signal. 
Furthermore, because the present invention further enables 
frames to be decrypted as they are received, the need for 
buffer RAMs required in prior systems to store incoming 
frames can be substantially reduced or eliminated, thereby 50 
lowering the cost of the systems. 

As explained in greater detail below, the preferred 
embodiment of the present invention increases the security 
of the conditional access provided to the transmitted data 
streams by providing a secure management system for the 55 
decryption keys. More specifically, the preferred embodi- 
ment provides a system having at least two levels of 
encryption, in which the decryption keys are themselves 
encrypted and never appear to users in decrypted or human- 
intelligible form. 60 

In the preferred embodiment, the adapter card 40 addi- 
tionally provides the encrypting and decrypting capabilities 
of the adapter card 40 to be used by the computer 50 as a 
general purpose bulk data encryptor/decryptor, even while 
the adapter card 40 is concurrently processing received 65 
frames. Not only does this feature reduce the overall cost to 
the user by eliminating the need for a separate data 
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encryption/decryption engine to handle computer data, it 
also permits the advantageous conditional access features of 
the present invention to be provided to data received by the 
adapter card 40 from the computer 50 via a number of 
possible sources, rather than from the satellite 20 alone. 

FIG. 2 illustrates the adapter card 40 of the preferred 
embodiment, which includes the following functional 
blocks: 

1. Front End Block 41, 42: connects the adapter card 
receiver 40 to the antenna receiver 30, for receiving a 
plurality of signals from the NOC 10 via the satellite 20 
and transmitting data streams 41a from a particular 
signal selected by the tuner 41 to the Demodulator 
Block 43; 

2. Demodulator Block 43: converts data streams 41a 
received on the selected signal into digital form and 
transmits the demodulated data stream 43a to the FEC 
Decoder Block 44; 

3. FEC Decoder Block 44: identifies and corrects trans- 
mission errors in the demodulated data stream 43a and 
transmits the corrected data stream 44a to the Inte- 
grated Filter/Crypto Block 45; 

4. Integrated FilteriCrypto Block 45: identifies frames 
within the received data stream 44a and decrypts 
frames of the accessible data streams; and 

5. Bus Interface Block 46: enables communication 
between the adapter card 40 and the computer 50. 

1. Front End Block 

In the preferred embodiment, as illustrated in FIG. 2, the 
Front End Block includes a tuner 41, which can be set to 
receive an IF signal in 100 kHz steps in the frequency range 
of 950 to 1450 MHz, and downconverts the received signal 
to an IF output centered at 60 MHz. The operation of the 
tuner 41 can be controlled 41b by the computer 50 through 
the Bus Interface Block 46, or in a preferred embodiment, a 
local microprocessor may be provided on the adapter card 
40 to monitor and control the tuner 41. 

The Front End Block preferably also comprises a 
DC — DC converter 42, to provide all power required by the 
tuner 41 as well as the attached LNB by converting a +5V 
signal 42a received from the computer power supply to 
voltages required by the various components (e.g., 42b). 

2. Demodulator Block 

The Demodulator Block 43 receives and demodulates the 
downconverted signal 41a from the Front End Block. In the 
preferred embodiment, the Demodulator Block 43 is imple- 
mented in a CMOS ASIC, and, through control 43b by the 
computer 50 or an adapter card microprocessor, provides all 
baseband signal processing required for demodulation. 

3. FEC Decoder Block 

The FEC Decoder Block 44 uses redundant data in the 
demodulated digital data stream 43a to identify and correct 
transmission errors. In the preferred embodiment, FEC 
Decoder Block 44 consists of a Viterbi soft-decision 
decoder, depuncture logic which allows the rate ¥1 Viterbi to 
operate at an effective rate of Vj, a deinterleaver which 
scatters the errors resulting from the incorrect attempts to 
correct data, and a Reed-Solomon decoder capable of cor- 
recting the scattered errors. 

4. Integrated Filter and Crypto Facility Block 

The Integrated Filter and Crypto Facility (IFC) Block 45 
plays a primary role in enabling the inventive conditional 
access features provided. 
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The IFC 45 receives frames of the digital data streams system because the entity providing distribution of Group 

44a, which are preferably encrypted. In the preferred Keys will encrypt a Group Key with the subscriber's unique 

embodiment, the standard DES algorithm is used, although User Key before transmission. Accordingly, the Group Key 

alternative encryption algorithms are possible as well. can be decrypted only by the IFC 45 of the subscriber for 

There are numerous methods by which users can acquire 5 which it is intended, minimizing the likelihood that it will be 

decryption keys, and the present invention can be adapted distributed to and successfully used by an unauthorzzed 

for use with any of these methods. For example, a subscriber user - Furthermore, even the authorized subscriber will never 

can obtain a "smart card" from the service provider, typi- °ave access to the decrypted Group Key, because the Group 

cally a credit-card sized card readable by the computer. In Ke y is encrypted by the User Key until decrypted within the 

some cases, the information provider can send information 30 physically secure IFC ASIC, and as described above, the 

that passes into the smart card to generate the decryption subscriber does not have access to the User Key. 

keys. Another method is to obtain the keys through messages In the preferred embodiment, the only function of a Group 

received from the satellite link or over a terrestrial commu- Key is to decrypt Data Keys for the data streams within the 

nications system (e.g., via a modem connected to the group. As discussed, because a subscriber must be a member 

computer). Still another method is for the subscriber to 35 of a group to access any of the data streams within the group, 

obtain the keys orally from the information provider and to only subscribers having the appropriate Group Key can 

manually enter the keys into the computer through the decrypt the Data Key. Additionally, because each Data Key 

keyboard input. is encrypted with its Group Key before being distributed to 

The security of the present invention can be maintained subscribers, in order to access and decrypt a particular data 

with any of these systems because it does not depend solely 20 stream within a group, the subscriber must have the appro- 

on the security of the actual transmission of the keys. Rather, P riate Data Ke y for that data stream, 

the security system of the present invention has multiple The combination of the Group Keys and the Data Keys 

levels of security. At a first level, to receive any satellite data determine the subscriber's accessibility to the incoming data 

stream, a user must subscribe to the service provider and streams, and must be kept current. In the preferred 

must obtain the necessary wiring and equipment. At the next 25 embodiment, an Access Table is stored in adapter card 

level, security is enhanced by means of "groups." Each memory outside of the IFC 45, with entries corresponding to 

group comprises a set of data streams, and a subscriber must data streams the subscriber is authorized to receive. Each 

have access to a particular group in order to receive any of entry accordingly has fields for an address of a data stream 

its data streams. Finally, in the preferred embodiment, an the subscriber is authorized to access, and a Group Key and 

additional level may be provided by requiring subscribers to 30 a Data Key required to decrypt that data stream. Because this 

have specific authorization to receive each individual data table is located outside the IFC 45, the Group and Data Keys 

stream within a group. are stored in encrypted form in the Access Table. A micro- 

The present invention implements this tiered conditional processor is preferably provided on the adapter card 40 

access system through key management. Users become „ outside the IFC 45 to perform the table functions and to 

subscribers by subscribing to the service provider and indicate to the IFC 45 whether a particular address matches 

obtaining an adapter card receiver 40, having an IFC 45, to a table entry, and also to indicate the appropriate key, if a 

be inserted into a computer 50. In the preferred embodiment, match B found - 

the IFC 45 is physically secured by implementation in an In the preferred embodiment, other aspects of the key 

ASIC, which is equipped with a bumed-in Master Key used 4Q management system are implemented within the IFC ASIC, 

for identification purposes. In the preferred embodiment, a For example, logic is provided for maintaining and storing 

unique Master Key is used for each IFC 45. current keys, as well as for handling data in both encrypted 

Preferably, to enhance the security of the conditional and decrypted form. As earlier noted, the IFC 45 in a 

access features provided, the Master Key is used for sub- preferred embodiment provides decryption functions for 

scriber identification rather than decryption. Accordingly, 45 doming frames as well as encryption and decryption 

each adapter card 40 is also assigned a unique User Key functions for bulk data from the computer 50. To provide 

which is encrypted with the Master Key before being these features, the ASIC logic includes at least the foUowing 

distributed to the subscriber, and is decrypted only within the subblocks: 

IFC 45. This prevents the User Key from ever appearing in UK Register, for storing the User Key of the subscriber, 

unencrypted form, even to the subscriber. Use of the User 50 which as described above, is decrypted by the Master 

Key rather than the Master Key allows the Master Key to be Ke y as it is loaded into the IFC 45; 

kept physically secure within the ASIC and minimizes its GK Register, for storing a single Group Key. Although a 

use, thereby minimizing its exposure. Consequently, the subscriber may have access to more than one group, as 

only method of compromising the security of the Master described above, the preferred embodiment provides an 

Key is by breaking the algorithm used to encrypt the User 55 access table outside the IFC 45 for storing the Group 

Key or by compromising the physical security of the IFC 45. Keys in encrypted form. When the IFC 45 receives an 

Furthermore, the security of the overall system can be encrypted frame, it extracts the data stream address, 

maintained through key distribution by simply changing a and if the address matches one of the access table 

subscriber's User Key. This avoids the need for physical entries, the appropriate Group Key is decrypted by the 

replacement of the IFC 45 even if the security of the User 60 User Key as it is loaded into the IFC 45; 

Key is compromised. DK Register, for storing a Data Key to decrypt input data, 

In the preferred embodiment having group access whether satellite data or computer data; 

requirements, the function of the User Key is to decrypt an encryptionidecryption engine, for performing the 

Group Keys. A subscriber wanting to access any data stream actual decryption of satellite data, or encryption or 

within a particular group must have the Group Key for that 65 decryption of computer data from other sources; 

group. A Group Key can be distributed to subscribers by any Input Registers, for storing input yet to be processed, 

appropriate means with little risk to the security of the preferably including at least one register specifically 
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designated for satellite data and at least one register 
specifically designated for computer data; 

Opcode Registers, for indicating the location of the appro- 
priate key for a particular operation and the location 
where the output should be stored, preferably including 5 
at least one register specifically designated for satellite 
data and at least one register specifically designated for 
computer data; and 

Output Registers, preferably including at least one regis- 
ter specifically designated for satellite data and at least ao 
one register specifically designated for computer data 
from other sources. 

In the preferred embodiment, the logic is implemented to 
provide functions for loading Group Keys, loading Data 
Keys, processing satellite data, and processing computer as 
data. The Load Group Key function is used to provide the 
IFC 45 with the necessary Group Key for decryption, when 
the address of a received frame matches an address stored in 
the access table. Input to the Load Group Key function is a 
Group Key encrypted by the User Key. When the IFC 45 20 
receives this instruction, it retrieves the User Key from the 
UK Register to decrypt the received Group Key, and stores 
the decrypted Group Key in the GK Register. 

A Load Data Key instruction indicates to the IFC 45 that 
the input is a Data Key encrypted by a Group Key. In 25 
response, the IFC 45 will decrypt the input with the Group 
Key stored in the GK Register and store the resulting 
decrypted Data Key in the DK Register. 

When the IFC 45 receives a Process Satellite Data 
instruction, the input contains an incoming satellite data 30 
stream frame. The IFC 45 locates the address in the address 
header of the frame and determines whether it has the Data 
Key necessary for decryption by searching the access table 
for the frame address. If a match is found, the IFC 45 will 
retrieve the appropriate Group and Data Keys, decrypt the 35 
frame and store the decrypted frame in an Output Buffer for 
satellite data; if not, the IFC 45 will discard the frame. 

Process Computer Data instructions are handled similarly. 
As previously noted, in the preferred embodiment, the IFC 
encryptionidecryption engine is capable of encrypting and 40 
decrypting data from other sources, transmitted by the 
computer 50. To enable operations to be simultaneously 
performed on both incoming satellite frames as well as 
incoming computer data, the IFC 45 time shares between 
frame reception and data encryption and decryption opera- 45 
tions. To process computer data, the computer 50 must 
transmit the key to be used, an indication of whether the key 
is to be used for encryption or decryption, and the data on 
which the operation is to be performed. Based on this input, 
the IFC 45 will perform the appropriate operation on the data 50 
and return the processed data to the attached computer 50 via 
the Bus Interface Block 46. 

Thus, unlike systems described in prior art which simply 
transmit incoming data streams into the computer 50, the 
IFC 45 of the present invention allows the computer 50 only 55 
conditional access to received data streams. In particular, 
only authorized signals are ever downloaded into the com- 
puter 50. The preferred embodiment provides enhanced 
security by ensuring that none of the keys required at any 
level of decryption ever appears outside the IFC ASIC in 60 
decrypted form, and by providing multiple layers of security. 
These layers not only make unauthorized access more 
difficult, but by implementing the layers in the key manage- 
ment system, they also enable a fast, simple method to 
recover from most security problems. More specifically, in 65 
response to problems due-to an unauthorized user obtaining 
a User Key assigned to an authorized subscriber, a new User 



Key can be distributed to that subscriber. Similarly, in 
response to security problems caused by unauthorized 
access to particular data streams, the data stream and group 
keys required for decrypting those data streams can be 
changed, and the updated keys provided only to authorized 
users. 

Besides security, the IFC 45 provides data management 
benefits by efficiently using memory and computer process- 
ing time, which is especially useful in downloading large 
files. The present invention filters incoming data stream 
frames by determining whether the computer is authorized 
to receive the frame based on its address, accepting only 
authorized frames. This significantly reduces the adapter 
memory requirements, since individual frames are decrypted 
as they are received rather than requiring encrypted frames 
to be buffered in their entirety awaiting decryption. This 
feature may eliminate the need for buffering frames on the 
adapter entirely, eliminating the need for buffers on the 
adapter card 40 and providing a significant cost reduction. 

Yet another advantage provided by the IFC 45 of the 
present invention is that, by providing address-based frame 
decryption, the adapter card 40 can simultaneously decrypt 
multiple data streams that are statistically multiplexed on the 
same broadcast signal. 

One skilled in the art will recognize that variations for 
providing the required capabilities of the IFC 45. For 
example, although the preferred embodiment is imple- 
mented with the three level security scheme described 
above, the present invention may be implemented with only 
two levels of security by providing only the User Keys and 
the Data Keys. In this case, the User Key serves the same 
purpose as in the three-level scheme, but the Data Keys will 
be provided to the adapter card 40 encrypted in the User Key 
rather than in a Group Key. Other levels of security may 
likewise be used without departing form the claimed inven- 
tion. 

5. Bus Interface Block 

The Bus Interface Block 46 enables communication 46a 
between the computer and the adapter card 40 for, among 
other things, controlling and monitoring the tuner 41 and the 
demodulator 43 and maintaining the key management sys- 
tem. Additionally, the Bus Interface Block 46 allows the 
attached computer 50 to obtain decrypted frames from the 
IFC Block 46, and to pass bulk data to the IFC 46 for 
encryption or decryption and receive the resulting processed 
data. After performing the required operation on incoming 
data, one implementation buffers the resulting data in 
memory provided on the adapter card 40, and interrupts the 
attached computer 50 for retrieval. Alternatively, in a pre- 
ferred embodiment, the Bus Interface Block 46 automati- 
cally reads the decrypted data into the memory of the 
attached computer 50. 

The present invention, as illustratively embodied in the 
preferred embodiment described above, provides an adapter 
card receiver 40, to be used in conjunction with a connected 
computer 50, for enabling users to conditionally access and 
quickly download multiple data streams, such as signals 
transmitted via satellite 20. The invention also maintains the 
security of privileged information by preventing the infor- 
mation to enter the computer of unauthorized users. 

However, it should be understood that a wide range of 
changes and modifications can be made to the preferred 
embodiment described above. It is therefore intended that 
the foregoing detailed description be illustrative rather than 
limiting, and that it is the following claims, including all 
equivalents, which are intended to define the scope of this 
invention. 
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What is claimed is: 

1. An apparatus comprising: 

a connector that is configured to connect said apparatus to 
an antenna device comprising an antenna capable of 
receiving a signal from a satellite; 5 

a tuner that is configured to receive a satellite signal from 
said connector and to perform tuning on the satellite 
signal; 

a demodulator that is configured to receive the tuned 
satellite signal from said tuner and to perform demodu- 10 
lation on the tuned satellite signal, thereby outputting a 
demodulated data stream, wherein the demodulation is 
performed in accordance with control by a computer; 

a forward error corrector that is configured to receive the 
demodulated data stream from said demodulator and to ]5 
perform forward error correction on the demodulated 
data stream, thereby outputting a corrected data stream; 

an address filterer that is configured to receive the cor- 
rected data stream from said forward error corrector 
and to perform address filtering upon frames within the 2 q 
corrected data stream, thereby outputting frames 
selected in accordance with the address filtering; and 

an interface that is configured to receive the selected 
frames from said address filterer and to output the 
selected frames to the computer. 2 5 

2. An apparatus according to claim 1, wherein said 
apparatus is insertable into the computer. 

3. An apparatus according to claim 2, wherein said 
apparatus is an adapter card. 

4. An apparatus according to claim 3, wherein said 30 
apparatus outputs the selected frames to the computer 
through a bus interface. 

5. An apparatus according to claim 1, wherein each frame 
comprises an address header for identifying the data stream 

to which the frame belongs, a data field containing data, and 35 
a CRC field. 

6. An apparatus according to claim 1, wherein the antenna 
device further comprises a low noise block, and said con- 
nector is configured to provide power to the low noise block 
using power from the computer. 40 

7. An apparatus according to claim 6, wherein said 
connector is configured to provide power to the low noise 
block by using a DC-DC converter to convert power from 
the computer. 

8. An apparatus according to claim 7, wherein the DC-DC 45 
converter provides power to said tuner. 

9. An apparatus according to claim 1, wherein said 
forward error corrector comprises a Viterbi soft-decision 
decoder, depuncture logic, a deinterleaver, and a Reed- 
Solomon decoder. 50 

10. An apparatus according to claim 1, wherein said 
computer is controlled by the computer. 

11. An apparatus according to claim 1, wherein the 
computer monitors said demodulator. 

12. An apparatus according to claim 1, wherein said 55 
interface interrupts the computer to retrieve the selected 
frames. 

13. An apparatus according to claim 1, wherein said 
interface automatically transfers the selected frames into 
memory of the computer. 60 

14. An apparatus comprising: 

a connector that is configured to connect said apparatus to 

an antenna device comprising an antenna capable of 

receiving a signal from a satellite; 
a tuner that is configured to receive a satellite signal from 65 

said connector and to perform tuning on the satellite 

signal; 
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a demodulator that is configured to receive the tuned 
satellite signal from said tuner and to perform demodu- 
lation on the tuned satellite signal, thereby outputting a 
demodulated data stream, wherein the demodulation is 
performed in accordance with control by a computer 
and wherein the computer monitors said demodulator; 

a forward error corrector that is configured to receive the 
demodulated data stream from said demodulator and to 
perform forward error correction on the demodulated 
data stream, thereby outputting a corrected data stream; 

an address filterer that is configured to receive the cor- 
rected data stream from said forward error corrector 
and to perform address filtering upon frames within the 
corrected data stream in accordance with an address 
header in each frame identifying the data stream to 
which the frame belongs, said address filterer output- 
ting frames selected in accordance with the address 
filtering; and 

an interface that is configured to receive the selected 
frames from said address filterer and to output the 
selected frames to the computer, 

wherein said apparatus is an adapter card insertable into 
the computer and said apparatus outputs the selected 
frames to the computer through a bus interface, 

wherein the antenna device further comprises a low noise 
block, and said connector is configured to provide 
power to the low noise block using power from the 
computer, 

wherein said forward error corrector comprises a Viterbi 
decoder, 

wherein said tuner is controlled by the computer. 

15. An apparatus according to claim 14, wherein said 
connector is configured to provide power to the low noise 
block by using a DC-DC converter to convert power from 
the computer. 

16. Aji apparatus according to claim 14, wherein said 
forward error corrector further comprises depuncture logic, 
a deinterleaver, and a Reed-Solomon decoder. 

17. An apparatus according to claim 14, wherein said 
interface interrupts the computer to retrieve the selected 
frames. 

18. An apparatus according to claim 14, wherein said 
interface automatically transfers the selected frames into 
memory of the computer. 

19. An apparatus according to claim 14, wherein said 
connector is configured to provide power to the low noise 
block by using a DC-DC converter to convert power from 
the computer. 

20. An apparatus according to claim 19, wherein the 
DC-DC converter provides power to said tuner. 

21. An apparatus comprising: 

a tuner that is configured to receive the output of a low 

noise block of a satellite receiver and perform tuning 

upon the output to select a signal; 
a data demodulator that is configured to receive the signal 

selected by said tuner and to convert the signal into a 

digital data stream; 
a power unit that is configured to receive power from a 

power supply of a computer and to output power to the 

low noise block of the satellite receiver through said 

tuner; and 

an interface that is configured to transmit from said 
apparatus to the computer the digital data stream from 
said data demodulator and information for monitoring 
said data demodulator. 
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22. An apparatus according to claim 21, wherein said 
interface is configured to allow the computer to send com- 
mands to said tuner and to said demodulator to control 
operation of said tuner and said demodulator. 

23. An apparatus according to claim 21, further compris- 5 
ing a forward error corrector for performing forward error 
correction on the digital data stream. 

24. An apparatus according to claim 21, further compris- 
ing means for identifying frames within the digital data 
stream. 10 

25. An apparatus according to claim 21, further compris- 
ing means for performing address filtering to select frames 
from the digital data stream having a predetermined address. 

26. An apparatus according to claim 21, further compris- 
ing means for performing decryption on a frame from the is 
digital data stream. 

27. An apparatus according to claim 21, wherein said 
apparatus is an adapter card insertable into the computer. 

28. An apparatus according to claim 21, further compris- 
ing a microprocessor for controlling operation of said tuner 20 
and said demodulator. 

29. An apparatus according to claim 21, wherein said 
power unit comprises a DC-DC converter that is configured 
to convert a voltage received from the power supply of the 
computer into a plurality of voltages. 25 

30. An apparatus according to claim 29, wherein the 
plurality of voltages are received by said tuner and include 
a voltage for the low noise block. 

31. An apparatus according to claim 30, wherein the 
voltage received from the power supply of the computer is 30 
+5V. 

32. An apparatus comprising: 

a tuner that is configured to receive the output of a low 
noise block of a satellite receiver and perform tuning 
upon the output to select a signal; 35 

a data demodulator that is configured to receive the signal 
selected by said tuner and to convert the signal into a 
digital data stream; 

a power unit that is configured to receive power from a 4Q 
power supply of a computer and to output power to the 
low noise block of the satellite receiver through said 
tuner; and 

an interface that is configured to transmit from said 
apparatus to the computer the digital data stream from 45 
said data demodulator and information for monitoring 
said tuner. 

33. A method comprising: 

tuning the output of a low noise block of a satellite 
receiver to select a signal; 50 

demodulating the signal selected in said tuning step into 
a digital data stream using a demodulator; 

one of (a) transmitting to a computer through an interface 
the digital data stream and information for monitoring 
said demodulating step, and (b) transmitting to a com- 55 
puter through an interface the digital data stream and 
information for monitoring said tuning step; and 

supplying power to the low noise block of the satellite 
receiver using a power supply of the computer. 6Q 

34. A method according to claim 33, further comprising 
receiving commands via the interface for controlling said 
tuning and demodulating steps from the computer. 
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35. A method according to claim 33, further comprising 
performing forward error correction on the digital data 
stream. 

36. A method according to claim 33, further comprising 
identifying frames within the digital data stream. 

37. A method according to claim 33, further comprising 
performing address filtering to select frames from the digital 
data stream having a predetermined address. 

38. A method according to claim 33, further comprising 
decrypting a frame from the digital data stream. 

39. An apparatus comprising: 

means for powering a low noise block of a satellite 
receiver using power from a computer; 

means for performing tuning and data demodulation upon 
the output of the low noise block to provide a digital 
data stream; 

means for transmitting the digital data stream to the 

computer; and 
means for transmitting information for monitoring the 

data demodulation to the computer. 

40. An apparatus according to claim 39, wherein said 
means for powering comprises means for converting a 
voltage from a power supply of the computer into a voltage 
for the low noise block. 

41. An apparatus according to claim 40, wherein said 
means for performing tuning and data demodulation com- 
prises a tuner, and wherein the voltage for the low noise 
block is provided to the low noise block through said tuner. 

42. An apparatus according to claim 21, wherein said 
power unit comprises a DC-DC converter that is configured 
to convert power from the power supply of the computer into 
a plurality of voltages. 

43. An apparatus according to claim 42, wherein the 
plurality of voltages are received by said tuner and include 
a voltage for the low noise block. 

44. An apparatus according to claim 32, wherein said 
power unit comprises a DC-DC converter that is configured 
to convert power from the power supply of the computer into 
a plurality of voltages. 

45. An apparatus according to claim 44, wherein the 
plurality of voltages are received by said tuner and include 
a voltage for the low noise block. 

46. A method according to claim 33, wherein said sup- 
plying step comprises a step of converting power from the 
power supply of the computer into a plurality of voltages. 

47. A method according to claim 46, wherein the plurality 
of voltages are received by a tuner used in said tuning step 
and include a voltage for the low noise block. 

48. An apparatus according to claim 39, wherein said 
means for powering comprises means for converting power 
from the power supply of the computer into a plurality of 
voltages. 

49. An apparatus according to claim 48, wherein said 
means for performing tuning and data demodulation com- 
prises a tuner, and wherein the plurality of voltages are 
received by said tuner and include a voltage for the low 
noise block. 

***** 
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